Skip to main content
Domains and delivery

Connect Google Workspace

Let Fallax place simulations in Gmail inboxes with one domain-wide delegation.

Written By Ignace

Last updated 21 days ago

Fallax delivers simulations by inserting them straight into your employees' Gmail inboxes through the Gmail API. Nothing is sent through a third party, so messages are never spam-flagged and no account gets suspended. You grant this once, in your Google Admin console.

Before you start

  • You need a Google Workspace super admin, or someone who can manage domain-wide delegation.

  • Your domain must already be verified in Fallax (by sign-in or DNS).

  • A workspace uses Google Workspace or Microsoft 365, not both.

Not an admin yourself? Click Ask your admin on the setup page and Fallax emails your IT admin exactly what to grant.

Set it up

  1. In Fallax, go to Settings → Integrations → Google Workspace.

  2. Under What Fallax may do, tick the capabilities you want. Delivery is always required.

  3. In the Google Admin console, open Security → Access and data control → API controls → Domain-wide delegation and click Add new.

  4. Paste the Client ID and the OAuth scopes exactly as Fallax shows them, then click Authorise.

  5. Back in Fallax, enter your domain and an admin mailbox. Fallax uses that mailbox once to confirm the delegation is live.

The setup page offers three ways to follow along: a short script, a prompt you can hand to an AI assistant, or step-by-step instructions.

What each capability does

Capability

Why you would turn it on

Deliver simulations

Required. Places simulations in inboxes.

Sync your people

Imports employees from your directory.

Sync your groups

Lets you sync only certain groups and keep audiences in step with them.

Discover apps in use

Powers App discovery, so lures match the tools people actually use.

List every app that holds access

Also for App discovery. Fallax only lists apps, it never revokes them.

Count Gmail's Report phishing button

Credits people who report a simulation with Gmail's own button.

Count forwarded reports

Off by default. Needed only if staff forward suspicious mail to a report mailbox.

Adding a capability later

Google replaces the scope list as a whole. When you add a capability, copy the full scope list from Fallax and replace the existing entry in the Admin console, rather than appending to it. Fallax then reads back which scopes were actually granted.

Test it

The connection test proves the delegation exists. To be sure delivery works end to end, launch a campaign to the Just me (test run) audience and check your own inbox.

Was this helpful?

Still need help? Ask the team